Adobe InDesign Desktop Buffer Error Vulnerability

Adobe InDesign Desktop is a page layout software from the American company Audobee Adobe. Adobe InDesign Desktop suffers from a buffer overflow vulnerability that originates from an out-of-bounds read, which can be exploited by an attacker to cause a sensitive memory leak...

Adobe InDesign Desktop Resource Management Vulnerability

Adobe InDesign Desktop is a page layout software from the American company Audobee Adobe. Adobe InDesign Desktop suffers from a Resource Management Error vulnerability that originates from reuse after release, which can be exploited by an attacker to cause a sensitive memory leak...

Adobe InDesign Buffer Overflow RCE

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2021-36004

Adobe InDesign version 16.0 and earlier is affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user...

Adobe InDesign Pointer Swap DoS

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Adobe InDesign Null Pointer Dereference Vulnerability (CNVD-2025-15166)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A null pointer dereference vulnerability exists in Adobe InDesign version ID19.5.2 and ID20.2 and earlier versions, which can be exploited by an attacker to cause a denial of service in the...

Adobe InDesign Out-of-Bounds Write Vulnerability (CNVD-2025-15167)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe InDesign version ID19.5.2 and ID20.2 and earlier versions, which can be exploited by an attacker to execute arbitrary code...

Adobe InDesign Null Pointer Dereference Vulnerability (CNVD-2025-15165)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A null pointer dereference vulnerability exists in Adobe InDesign version ID19.5.2 and ID20.2 and earlier versions, which can be exploited by an attacker to cause a denial of service...

Adobe InDesign Pointer Swap DoS

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Adobe InDesign code issue vulnerabilities

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A null pointer dereference vulnerability exists in Adobe InDesign version ID19.5.2 and ID20.2 and earlier versions, which can be exploited by an attacker to cause a denial of service in the...

Adobe InDesign < 19.5.3 / 20.0 < 20.3.0 Multiple Vulnerabilities (APSB25-37) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.3, 20.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-37 advisory. - InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write vulnerabilit...

Adobe InDesign buffer error vulnerability

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe InDesign version ID19.5.2 and ID20.2 and earlier versions, which can be exploited by an attacker to execute arbitrary code...

PT-2025-20984 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign Desktop versions ID19.5.2, ID20.2 and earlier Description: The issue is a NULL Pointer Dereference that could lead to application denial-of-service. An attacker could exploit this to crash the application, causing a disruption ...

PT-2025-20983 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID19.5.2, ID20.2 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

APSB25-37 : Security update available for Adobe InDesign

Adobe has released a security update for Adobe InDesign. This update addresses critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and application denial-of-service...

Adobe InDesign < 19.5.3 / 20.0 < 20.3.0 Multiple Vulnerabilities (APSB25-37)

The version of Adobe InDesign installed on the remote Windows host is prior to 19.5.3, 20.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-37 advisory. - InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write...

Adobe InDesign Pointer Error DoS

The vulnerability of Adobe InDesign’s computer layout automation tool is related to errors in pointer assignment. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created malicious file...

Adobe InDesign DoS

The vulnerability of Adobe InDesign’s computer layout automation tool is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to trigger a service failure using a specially created malicious file...

Adobe InDesign Buffer Overflow RCE

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

Adobe InDesign Pointer Error DoS

The vulnerability of Adobe InDesign’s computer layout automation tool is related to errors in pointer assignment. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created malicious file...